Lucene search

MitreCVELIST:CVE-2021-38714

HistoryAug 24, 2021 - 1:57 p.m.

CVE-2021-38714

2021-08-2413:57:43

mitre

www.cve.org

plib

integer overflow

ssgloadtga

arbitrary code execution

EPSS

0.02

Percentile

89.1%

JSON

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file.

References

lists.debian.org/debian-lts-announce/2021/10/msg00000.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HT3BKNAXLDY246UPUNRSBPGGVANRDOU/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTVSAKNCEYVMVAURQSB5GNA2MWL4XDPH/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5SML6W6Z2B6THT76VPUKUFYQJABODFU/

sourceforge.net/p/plib/bugs/55/

EPSS

0.02

Percentile

89.1%

JSON

Related for CVELIST:CVE-2021-38714